print-server — PATCH//NOTES

31 AUG 2026exploits

The $63 Print Server With Two Unauthenticated 9.8s: Xiiaozet LK100W, CISA ICSA-26-239-01

A ~$63 Chinese wireless USB print server whose entire job is to sit on your LAN and share a dumb printer just got a CISA ICS advisory: three CVEs, two of them CVSS 9.8 with no authentication required. All fixed in firmware 2.1.240. If you own one, patch it and VLAN it.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 9.8CVE-2026-78239 +2

ics xiiaozet print-server

29 AUG 2026exploits

PaperCut's Zero-Day Is Being Exploited Right Now: Every Version Is Exposed, and the Patch Race Is the Real Story

An actively-exploited zero-day in PaperCut NG/MF affects every supported version. The alert came from a university's forensics team, an emergency patch for v25/v26 shipped the next morning, hardened Release 2 for every branch followed by 10:08pm AEST on Aug 28, and it published two new CVEs plus concrete IOCs to hunt.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.Exploited in the wildCVE-2026-82078 +3

papercut zero-day print-server